aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon-cmd/cmd
Commit message (Collapse)AuthorAgeFilesLines
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-9/+11
|
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-10/+10
|
* Use standard unsigned integer typesAndreas Steffen2016-03-241-1/+1
|
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-211-1/+1
|
* Make sure getpass() is availableTobias Brunner2014-05-291-1/+3
| | | | It's not on Android for example.
* ike: Add an additional but separate AEAD proposal to CHILD configMartin Willi2014-05-161-0/+2
| | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
* ike: Add an additional but separate AEAD proposal to IKE config, if supportedMartin Willi2014-05-161-0/+1
|
* enum: Return boolean result for enum_from_name() lookupMartin Willi2014-05-161-3/+2
| | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned.
* charon-cmd: Request an IPv6 virtual IP if an IPv6 remote subnet givenMartin Willi2014-02-061-4/+23
|
* charon-cmd: Add --esp/--ah-proposal options to specify CHILD_SA proposalsMartin Willi2014-02-063-1/+43
|
* charon-cmd: Add an --ike-proposal option to specify non-default IKE proposalsMartin Willi2014-02-063-1/+34
|
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-2/+2
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-1/+1
|
* charon-cmd: support prompting for a PINMartin Willi2013-09-031-4/+8
| | | | | To support a Password and PIN XAuth combo, additionally support multiple prompts for different credential types.
* charon-cmd: add --eap-identity and --xauth-username optionsMartin Willi2013-07-293-0/+31
|
* Fix various API doc issues and typosTobias Brunner2013-07-181-0/+5
| | | | Partially based on an old patch by Adrian-Ken Rueegsegger.
* charon-cmd: Shortened and fixed command descriptionsTobias Brunner2013-06-211-2/+2
|
* charon-cmd: Simplify usage output for authentication profilesTobias Brunner2013-06-211-11/+3
| | | | The man page describes the min full.
* charon-cmd: Add --debug argument to set the default log levelTobias Brunner2013-06-212-0/+3
|
* charon-cmd: use a copy of pid in initiate callbackMartin Willi2013-06-201-6/+7
| | | | | When cancelling a connection that gets established, cmd_connection_t gets freed before terminate() is called. This results in kill()ing invalid PID.
* charon-cmd: add IKEv1 aggressive mode profilesMartin Willi2013-06-203-10/+35
|
* charon-cmd: Add support for PKCS#12 filesTobias Brunner2013-05-084-1/+52
|
* charon-cmd: match_me/match_other are optional in callback credentialsTobias Brunner2013-05-081-1/+8
|
* charon-cmd: Request password for private keysTobias Brunner2013-05-081-0/+3
|
* charon-cmd: --agent optionally takes the path to an ssh-agent socketTobias Brunner2013-05-083-16/+24
| | | | If not given it is read from the SSH_AUTH_SOCK environment variable.
* charon-cmd: Properly initialize options with no additional linesTobias Brunner2013-05-071-10/+10
|
* agent: Use sshkey plugin to parse keys, adds support for ECDSATobias Brunner2013-05-071-1/+3
|
* charon-cmd: Add --agent option to authenticate using ssh-agent(1)Tobias Brunner2013-05-074-0/+72
| | | | | | The socket path is read from the SSH_AUTH_SOCK environment variable. So using this with sudo might require the -E command line (or an appropriate sudoers config) to preserve the environment.
* charon-cmd: Use loose matching of gateway identityTobias Brunner2013-05-071-0/+1
|
* charon-cmd: add an option to set a different server identityMartin Willi2013-05-063-1/+19
|
* charon-cmd: add support for different IKEv1/IKEv2 authentication profilesMartin Willi2013-05-064-17/+170
|
* charon-cmd: support multi-line help text for each option in usageMartin Willi2013-05-061-1/+3
|
* charon-cmd: add --local/remote-ts options to set traffic selectorsMartin Willi2013-05-063-4/+64
|
* charon-cmd: prompt for EAP passwords on-demand using a callback credential setMartin Willi2013-05-061-0/+49
|
* charon-cmd: authenticate with EAP if no private key is givenMartin Willi2013-05-061-1/+18
|
* charon-cmd: add support for using dynamic ports in charon-cmdMartin Willi2013-05-061-4/+8
|
* charon-cmd: load certificates and RSA private keysMartin Willi2013-05-064-0/+178
|
* charon-cmd: add a connection object and its initiation to charon-cmdMartin Willi2013-05-064-0/+277
|
* charon-cmd: move command line options to separate file, obsolete short optionsMartin Willi2013-05-062-0/+86